Hello @rotpa.
Please, do the following:
- Create backup copies of your website files and database. Usually it could be done in your hosting panel.
- Delete all unused, outdated and abandoned plugins and themes from your website. Doing so will reduce the total amount of files for the scanner to check.
- Update WordPress (if possible), all plugins and themes that are being used at the moment.
- Start the malware scanner again:
https://cleantalk.org/help/security-malware-scanner
If anything bad happens, please roll back the backup you created on the step 1.
Changing your passwords is also a good choice.
Check your security log if there is any suspicious activity:
https://cleantalk.org/my/logs_firewall
Did it help you?
Thread Starter
rotpa
(@rotpa)
Hi @serge00
Thanks for your quick reply.
I tried to follow all the steps but cannot be sure if its working (the site is still blocked by the host).
In the log files most of the stuff is alright I think. In the firewall log there are some login attempts which are then blacklisted.
Is this a normal thing:
Brute-force
Banned / Logins
Today
Yesterday
Week
0 / 2
2 / 9
605 / 46
We need additional details about your website. Please contact us via our private Ticket System: https://cleantalk.org/my/support/open.
Please send the log of access to the database during the attack in the ticket.
Also specify what kind of attack was there? Is this a spam attack on site forms or a denial of service attack?
Hello,
We received a ticket from you. Let’s continue there